Add gRPC Authentication And Scope Authorization #8

Closed
opened 2026-04-26 15:22:29 -04:00 by dohertj2 · 3 comments
Owner

Source: $file
Milestone: $currentMilestone

Labels: area:auth, area:gateway, type:feature, priority:p0

Deliverables:

  • gRPC auth middleware/interceptor,
  • request identity context,
  • scope checks for sessions, invoke, secure invoke, events, metadata, and
    admin actions.

Acceptance criteria:

  • missing/invalid key returns unauthenticated,
  • valid key with missing scope returns permission denied,
  • auth applies to unary and streaming calls.

Tests:

  • unary auth,
  • streaming auth,
  • scope mapping.
Source: $file Milestone: $currentMilestone Labels: `area:auth`, `area:gateway`, `type:feature`, `priority:p0` Deliverables: - gRPC auth middleware/interceptor, - request identity context, - scope checks for sessions, invoke, secure invoke, events, metadata, and admin actions. Acceptance criteria: - missing/invalid key returns unauthenticated, - valid key with missing scope returns permission denied, - auth applies to unary and streaming calls. Tests: - unary auth, - streaming auth, - scope mapping.
dohertj2 added this to the gateway-auth milestone 2026-04-26 15:22:29 -04:00
dohertj2 added the area:gatewayarea:authtype:featurepriority:p0 labels 2026-04-26 15:22:29 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:33 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:33 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:33 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:34 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:35 -04:00
Author
Owner

Worker 1 is taking this issue.

Branch: agent-1/issue-8-add-grpc-authentication-and-scope-authorization
Worktree: C:\Users\dohertj2\Desktop\mxaccessgw-agent-1

Worker 1 is taking this issue. Branch: agent-1/issue-8-add-grpc-authentication-and-scope-authorization Worktree: C:\Users\dohertj2\Desktop\mxaccessgw-agent-1
Author
Owner

Implemented and merged via PR #63: #63

Commit: fad0ac9
Merge commit on main: c8fb3e91a3
Branch: agent-1/issue-8-add-grpc-authentication-and-scope-authorization

Verification:

  • dotnet build src\MxGateway.sln passed with 0 warnings and 0 errors.
  • dotnet test src\MxGateway.sln passed: 127 total tests.

Acceptance criteria verified: gRPC authorization services enforce scopes, unauthenticated/insufficient-scope paths fail, authenticated calls populate request identity, and redaction tests cover auth context.

Implemented and merged via PR #63: https://gitea.dohertylan.com/dohertj2/mxaccessgw/pulls/63 Commit: fad0ac9 Merge commit on main: c8fb3e91a3f627844ff6a145f24c72f09eeb9411 Branch: agent-1/issue-8-add-grpc-authentication-and-scope-authorization Verification: - dotnet build src\\MxGateway.sln passed with 0 warnings and 0 errors. - dotnet test src\\MxGateway.sln passed: 127 total tests. Acceptance criteria verified: gRPC authorization services enforce scopes, unauthenticated/insufficient-scope paths fail, authenticated calls populate request identity, and redaction tests cover auth context.
Author
Owner

Milestone gateway-auth complete.

Closed issues: #5, #6, #7, #8.
PRs merged: #56, #59, #62, #63.
Branches: agent-2/issue-5-implement-sqlite-auth-store-and-migrations, agent-2/issue-6-implement-api-key-hashing-and-verification, agent-2/issue-7-implement-local-api-key-admin-cli, agent-1/issue-8-add-grpc-authentication-and-scope-authorization.

Final verification commands run during issue verification:

  • dotnet build src\MxGateway.sln
  • dotnet test src\MxGateway.sln

Final merged main commit for this milestone: c8fb3e91a3.

Milestone gateway-auth complete. Closed issues: #5, #6, #7, #8. PRs merged: #56, #59, #62, #63. Branches: agent-2/issue-5-implement-sqlite-auth-store-and-migrations, agent-2/issue-6-implement-api-key-hashing-and-verification, agent-2/issue-7-implement-local-api-key-admin-cli, agent-1/issue-8-add-grpc-authentication-and-scope-authorization. Final verification commands run during issue verification: - dotnet build src\\MxGateway.sln - dotnet test src\\MxGateway.sln Final merged main commit for this milestone: c8fb3e91a3f627844ff6a145f24c72f09eeb9411.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Reference: dohertj2/mxaccessgw#8